Product / Member Security Engineer in Zazmic

We are looking for a Product and Member Security Engineer to join our dynamic security team at Tripadvisor. The Product and Member Security Engineer will play a pivotal role in collaborating with product management and engineering teams to enhance the security of our websites, mobile applications, and B2B customer and consumer interfaces. You will be responsible for safeguarding our systems and ensuring the protection of our users' data.

Key Responsibilities:

Work closely with product management and engineering teams to integrate security measures into the development life cycle of websites, mobile applications, and B2B interfaces.

Perform security assessments and code reviews to identify vulnerabilities and recommend mitigation strategies.

Develop and implement security guidelines, best practices, and standards for product development.

Collaborate with cross-functional teams to ensure secure software development practices and security awareness.

Investigate and respond to security incidents and breaches, implementing necessary corrective actions.

Monitor security trends, emerging threats, and industry best practices to keep our systems resilient and up-to-date.

Assist in creating and maintaining a culture of security within the organization.

Conduct security training and awareness programs for development and product teams.

Requirements

Qualifications:

Bachelor's degree in Computer Science, Information Security, or a related field.

A minimum of 3 years of experience in a security engineering role, particularly in web and mobile application security.

Strong understanding of application security concepts, best practices, and common vulnerabilities.

Familiarity with security standards, including OWASP, CWE, and secure coding practices.

Experience with security assessment tools and methodologies.

Strong problem-solving and communication skills to collaborate with cross-functional teams effectively.

Security certifications such as CISSP, CSSLP, CEH, or relevant credentials are a plus.

Familiarity with mobile application security (iOS and Android) and B2B security considerations is advantageous.

PLUS, if you have some development experience and/or working knowledge of code.